Last updated: 19 September 2026

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our websites, sign up to our emails or communities, buy our products, or take part in our events and programs.

Please read it alongside our Terms & Conditions and Refund & Cancellation Policy.

1. Who we are

This website and the brands Bali Breathwork and Melanie Lopes are operated by:

Sacred Movement LP, a limited partnership registered in Scotland under registration number SL037189. Registered office: 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN.

In this policy, "we", "us" and "our" refer to Sacred Movement LP. We are the data controller responsible for your personal information.

If you have any questions about this policy or how we handle your data, contact us at contact@balibreathwork.com.

2. The information we collect

We collect the following categories of personal information:

Information you give us directly:

• Name and email address (when you sign up for our free guide, emails, events or programs)

• Billing details and country (payments are processed by Stripe — see section 5)

• Phone number (if you join a WhatsApp community or give it to us)

• Instagram handle and messages (if you interact with us via Instagram / ManyChat)

• Responses to surveys, questionnaires and reflection forms (for example, our pre-program reflection or intake forms)

• Any information you choose to share with us in emails, messages, community groups, or during live sessions

  
  

Information we collect automatically:

• Website usage data (pages visited, time on site, device and browser type, approximate location) via analytics tools

• Cookies and similar tracking technologies (see section 8)

  
  

Information from third parties:

• Engagement data from our email platform (opens, clicks) and social platforms

• Payment confirmation (not your full card details) from Stripe

  
  

Special category (sensitive) data

Our work involves breathwork, somatic practice and emotional wellbeing. This means you may voluntarily share information relating to your physical or mental health, emotional state, or wellbeing — for example in a health disclaimer, an intake form, a reflection questionnaire, or during a session or community discussion.

Under UK data protection law this is "special category" data, which receives extra protection. We only process it where you have given us your explicit consent (which we collect through a clear opt-in on our health and intake forms), or where it is necessary to protect your or someone else's vital interests. This information is stored securely and kept separately for each participant, and access is restricted to those who need it to deliver your program safely. You are never required to share sensitive information, and you may withdraw your consent at any time.

3. How we use your information

We use your personal information to:

• Deliver the products, events, programs and services you have signed up for

• Take payment and send confirmations, receipts and access details

• Send you the free resources you requested

• Send you marketing emails and messages about our events, programs and offers (where you have consented or where permitted by law — you can opt out at any time)

• Run and moderate our community groups (including WhatsApp)

• Ensure your safety and suitability for breathwork practice (via health disclaimers)

• Respond to your enquiries and provide customer support

• Understand how our website and content perform, and improve them

• Comply with our legal and regulatory obligations

4. Our legal bases for processing

Under UK GDPR we rely on the following legal bases: Purpose & Legal basis.

Delivering products/events/programs you bought

Performance of a contract

Sending free resources you requested

Consent

Marketing emails and messages

Consent (and/or legitimate interests for existing customers)

Health and safety screening for breathwork

Explicit consent (special category data)

Website analytics and improvement

Consent (cookies) / legitimate interests

Legal, tax and accounting obligations

Legal obligation

Protecting someone's safety in a crisis

Vital interests

5. Who we share your information with

We do not sell your personal information. We share it only with trusted service providers ("processors") who help us run the business, and only as necessary. These currently include:

• Stripe — payment processing

• Mailchimp — email marketing and delivery

• GoHighLevel — WhatsApp / SMS communication

• ManyChat — Instagram messaging automation

• Typeform — surveys, intake and reflection forms

• Zapier — connecting the above tools

• Webflow — website hosting

• Google (Analytics) and Meta (Pixel) — website analytics and advertising measurement

Each provider processes your data under its own privacy terms and only on our instructions. We may also disclose information where required by law, or to protect the rights, safety or property of ourselves or others.

6. International data transfers

We operate globally and some of our service providers (including those above) are based outside the UK/EEA, such as in the United States. Where your data is transferred internationally, we rely on legally recognised safeguards such as UK adequacy regulations, the UK Addendum to the EU Standard Contractual Clauses, or equivalent protections to keep your information safe.

7. How long we keep your information

We keep your personal information only for as long as necessary:

• Customer and transaction records: as required for tax and accounting (typically 6 years)

• Marketing contacts: until you unsubscribe or ask us to delete your data, or after a prolonged period of inactivity

• Health and reflection form responses: only as long as needed to deliver the relevant program safely, then deleted or anonymised

• Analytics data: in line with the retention settings of our analytics tools

8. Cookies and tracking

Our website uses cookies and similar technologies, including Google Analytics and the Meta Pixel, to understand how visitors use the site and to measure our advertising.

Our cookie consent banner is live on our website. You can control non-essential cookies through the banner and your browser settings. Where required, we ask for your consent before setting non-essential cookies.

9. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you

• Rectify inaccurate or incomplete data

• Erase your data ("right to be forgotten")

• Restrict or object to processing

• Data portability (receive your data in a portable format)

• Withdraw consent at any time (this won't affect processing done before you withdrew)

• Opt out of marketing at any time via the unsubscribe link or by contacting us

To exercise any of these rights, email contact@balibreathwork.com. We will respond within one month.

10. Marketing

When you subscribe, you consent to receiving marketing emails and/or messages from us. Every email includes an unsubscribe link, and you can opt out of WhatsApp/SMS at any time by following the instructions in the message or contacting us. We will always respect your choice promptly.

11. Children

Our products and services are intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

12. Data security

We take reasonable technical and organisational measures to protect your personal information. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Complaints

If you have a concern about how we handle your data, please contact us first at contact@balibreathwork.com so we can try to resolve it.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO) — www.ico.org.uk — or your local supervisory authority if you are outside the UK.

14. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Significant changes will be communicated where appropriate.

This Privacy Policy has been prepared for Sacred Movement LP following standard UK GDPR requirements. It is provided in good faith and does not constitute legal advice.